3 months ago
Remote, United Kingdom +2 moreStaff+
Responsibilities
- Lead the secure design of new cloud services and solutions in line with security strategies.
- Identify security issues in existing system designs and recommend mitigations balancing cost, risk, and usability.
- Apply security practices across application, infrastructure, network, web application, cryptographic, and software-development lifecycles.
- Work with delivery teams to promote secure practices throughout the software development journey.
- Test the security of software and infrastructure using appropriate security tools.
- Educate customers, colleagues, and wider communities on effective security practices.
- Manage, coach, and develop a small number of staff, including employee performance and career development.
- Provide direction and leadership while solving challenging security problems.
- Communicate security complexities to senior stakeholders and development teams.
Requirements
- Expertise leading secure design for new cloud services and solutions.
- Expertise identifying security issues in existing system designs and defining sensible mitigations.
- Knowledge of security standards and regulations including NCSC, ISO, SoC, NIST, PCI, and GDPR.
- Experience in AI, ML, data, cloud, M365, or security architecture.
- Experience in application architecture, software development, or infrastructure architecture.
- Industry experience in public, healthcare, defence, or commercial sectors.
- Experience testing software and infrastructure security with appropriate tools.
- Experience with continuous security, continuous integration, and continuous delivery techniques.
- Experience with network security, including OSI and TCP/IP; web application security, including OWASP; and cryptographic controls, including PKI and TLS.
- Demonstrated ability to manage, mentor, and coach team members and the wider community.
- Excellent communication skills for audiences with varied technical abilities.
- Desirable experience with identity management and authentication or authorization products and patterns.
- Desirable involvement across the full security lifecycle and end-to-end security, including governance, risk and compliance, operational security, supply chain security, and secure user management.
- Active participation in knowledge-sharing activities.
- Penetration specialist certifications are desirable.
Categories
About Kainos
Kainos is a Belfast-headquartered, publicly listed IT services company that designs and delivers digital services and Workday solutions for public, healthcare and commercial clients. Its business includes agile software engineering, cloud and data platforms, systems integration, and a Workday implementation and testing practice (including the Smart automated testing product). Founded in 1986 and listed on the London Stock Exchange, Kainos operates across the UK, Europe and North America.